How to contact us

You can update your preferences and information, or if you have any questions or concerns about our use of your personal information, by contacting us through any of the methods listed below: Phone: (415) 964-5618

Email: privacy@nestdonorbank.com

Address:

Nest Cryobank

1 Daniel Burnham Court, Suite 110C

San Francisco, CA 94109

ATTN: Privacy Team

The information we collect about you and how we use it

When you visit the Site or use our services, NEST may collect and store personally identifiable information, such as your name, address, and email address.  The information that we collect and store about you depends on whether you are an egg donor applicant, intended parent, or general website visitor, and the services in which you elect to participate.  For egg donors, we collect comprehensive information to evaluate eligibility and create donor profiles.  For intended parents, we collect information to facilitate matching services and coordinate the donation process.  We use this information to provide and improve the quality of our egg bank and matching services, offer you opportunities we think will interest you, and better tailor the advertising you see from us to suit you.  This information is not shared with anyone outside of NEST except as provided in this Privacy Policy or as explained at the time the information is collected.  The information we collect can include personal information (as described below) or non-personal information.

Personal information is information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to an identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. We collect information through any correspondence that you provide to us whether through email, mail, phone calls, or through our Site or services.

In addition, we may also collect personal information about you from third parties, including from the following sources:

• Service providers (e.g., data hosting providers, software and information technology vendors, etc.)
• Data analytics service providers
• Financial and payment technology service providers
• Third parties in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of a business, its assets, or its stock (including in connection with any bankruptcy or similar proceedings)
• Email and other communications service providers
• Recruiting and background check service providers and their agents
• Promotional partners
• Social media platforms

If we combine or associate information from other sources with personal information that we collect through the Site, we will treat the combined information as personal information in accordance with this Privacy Policy.

Information we collect

We may collect the following categories of personal information from you, depending on your interactions with the Site and the choices you make, as further described in the chart below:

Category	Collection Types and Descriptions	How We Use Information Collected
Identifiers Name, email address, postal address, billing postal address, work address, telephone number, and Internet Protocol (IP) address.	Publication Subscription Information You may provide your email address in order to receive updates, success stories, and the like via email (including via “The Blast” as offered through our Site).	To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you.
	Service Information This may include any information that you choose to provide, whether by phone, email, mail, or chat, to our representatives or other NEST employees or Representatives (as defined below).	To provide, maintain, operate, personalize, and improve the Site and services. To evaluate and improve the content of the Site. To respond to your questions and requests. To provide support. To allow you to participate in interactive features of the Site when you choose to do so.
	Feedback, Surveys, or Contests We may offer you the opportunity to participate in online surveys, solicitations, or contests. Participation in surveys, solicitations, or contests is completely voluntary. Therefore, you have a choice as to whether to disclose any information.	To notify contest winners and award prizes. To provide, maintain, personalize, and improve the Site. To gather analysis and assess trends and interests. To conduct aggregate or research analysis to enhance, protect, and make informed decisions on the Site.
Payment and Purchasing Information Financial information provided by you, including name, billing and shipping address, payment information, and other financial data.	This includes any information that you choose to provide when conducting financial transactions on the Site or through our services, including information we receive from vendors or service providers, such as payment processors.	To provide you with services. To process your transactions. To respond to your questions and requests. To provide support. To provide you with recent information about a transaction.
Employment-Related Information Information you provide when applying for employment with NEST, such as education information, professional certifications, work eligibility status, and current and past employment history.	This includes any information that you choose to provide when applying for employment with NEST, including information you may provide to our third-party employment service providers.	To enforce our agreements, terms, conditions, and policies. To prevent or investigate fraud. To evaluate eligibility for employment. To determine employment decisions.
Interactions Records of transactions and other information you post or otherwise submit to us, including emails or other communications you provide to us.	This includes any information provided through electronic or other means when you interact with NEST via email, phone calls, text messaging, or other types of interactions.	To provide, maintain, operate, personalize, and improve the Site and services. To evaluate and improve the content of the Site. To respond to your questions and requests. To provide support. To enforce our agreements, terms, conditions, and policies. To provide you with recent information about a transaction.
Usage Information “Usage Information” can be personal information and non-personally identifiable information that may be collected about you when you are using the Site. Browser History: Data about the webpages you visit, including without limitation web browser specifications, website visits before accessing the Site, and website visits after leaving the Site. Device, Connectivity, and Configuration Data: Data about your device and nearby networks, including internet connection information, computer equipment information, regional and language settings.	In addition to browser history and device, connectivity, and configuration data, Usage Information may include: Information about your interactions with the Site, which includes the date and time of any information you enter into the Site and your interactions with other users of the Site and what content or features you interacted with. Technical data which may include URL information, cookie data, web beacons, web pixels, clickstream information collection, and other tracking technology information, your IP address, the types of devices you are using to access or connect to the Site, unique device IDs, device attributes, network connection type (e.g., Wi-Fi, 3G, LTE, Bluetooth) and provider, network and device performance, browser type, language, and operating system. Further details about the technical data that is processed by us can be found below. The Site uses cookies, unique identifiers, and similar technologies to collect information over time and across different websites when you use or visit the Site. We or our third-party partners use common tracking tools to collect information about the pages you view, the Site functions that you access, the buttons and icons you click, and to remember your login information and Site settings to make it easier and more efficient for you to use the Site, and to provide advertising content that we think may be of interest to you. For more information about our use of cookies, pixels, and web beacons, please see the “Tracking Technologies and Third-Party Advertisements” section below and as detailed in our Cookie Preferences. We or our third-party partners may use invisible pixels or beacons on the Site to count how many users access or use certain pages, features, or content.	To improve our content and the products, services, materials, and other content we make available through the Site. To optimize the display of the Site on your device. To provide, maintain, personalize, and improve the Site. To provide support. To monitor the usage of the Site. To allow you to participate in interactive features of the Site when you choose to do so. To gather analysis and assess trends and interests. To enforce our agreements, terms, conditions, and policies. To detect, prevent, and address technical issues. To prevent or investigate fraud. To provide you with advertising content in which we think you will be interested. As part of this customization, we may observe your behaviors on the Site or on other websites. To help maintain the safety, security, and integrity of the Site and technology assets. To investigate complaint and potential violations of our policies.
Location Data Data about your device’s location, which is inferred from your internet connection data, your IP address, and your postal address, or which you may choose to allow us to access by granting the Site access to your location when prompted.	We may collect general location information if you use features on the Site that provide location-based services.	• To provide you with location-based services. • To monitor the usage of the Site. • To gather analysis and assess trends and interests. • To customize the Site to your preferences and location.
Demographic Data Data about you such as your business or company information, professional or personal reference contact information, and other data reflecting your preferences for the Site.	We may collect such personal information when you make an appointment, contact us, inquire about our services, and respond to our communications to you. Demographic data may include data about: Your business or company information. Your professional or personal reference contact information. Other data reflecting your preferences for the Site.	To provide, maintain, operate, personalize, and improve the Site. To evaluate and improve the consent of the Site. To provide support. To monitor the usage of the Site. To gather analysis and assess trends and interests.
Third-Party Data Data from third parties such as vendors, data brokers, and public sources.	This may include both personal information and non-personally identifiable information from our partners, vendors, data brokers, or public sources.	To provide, maintain, operate, personalize, and improve the Site. To monitor the usage of the Site. To gather analysis and assess trends and interests. To work with our service providers who perform certain business functions or services on our behalf. To provide you with advertising content in which we think you will be interested. As part of this customization, we may observe your behaviors on the Site or on other websites.
Third-Party Social Network Service(s) Data provided if you choose to access, visit, and/or use any third-party social networking service(s) that may be integrated with the Site, we may receive your personal information and other information about you and your computer, mobile, or other device that you have made available to those social networking services, including information about your contacts through those services.	This may include information provided by certain social networking services that may facilitate registration or enhance or personalize your experience on the Site. This includes if you “follow,” “like,” or link your social networking account to the Site. Your decision to use a social networking service in connection with the Site is voluntary. However, you should make sure you are comfortable with the information your third-party social networking services may make available by reviewing privacy policies of those providers and/or modifying your privacy settings directly with those networking services.	To provide, maintain, operate, personalize, and improve the Site. To monitor the usage of the Site. To gather analysis and assess trends and interests. To work with our service providers who perform certain business functions or services on our behalf. To provide you with advertising content in which we think you will be interested. As part of this customization, we may observe your behaviors on the Site or on other websites.
Chatbot Interactions Data collected through our automated chatbot system on our website.  This may include conversation transcripts, personal identifiers (name, email, phone number), inquiries about egg donation or becoming an intended parent, requests for information about our matching services, and technical data such as session information and response patterns.  The chatbot is designed to assist prospective egg donors and intended parents with initial questions about our egg bank and matching services.	This may include conversation transcripts, personal identifiers (name, email, phone number), inquiries about egg donation or becoming an intended parent, requests for information about our matching services, and technical data such as session information and response patterns.  The chatbot is designed to assist prospective egg donors and intended parents with initial questions about our egg bank and matching services.	To respond to inquiries about our egg bank and matching services. To schedule initial consultations for prospective egg donors and intended parents. To provide personalized information about our egg donation program. To improve chatbot functionality and user experience. To analyze common questions and improve our services. To transition inquiries to appropriate donor coordinators or matching specialists when necessary. To maintain records of communications with prospective donors and intended parents.
Anonymized Information Data we may create or derive from your personal information or your Site or service usage.	This may include anonymized and aggregated information that may be created or derived from your personal information or usage of the Site.	To provide, maintain, personalize, and improve the Site. To monitor the usage of the Site. To prevent or investigate fraud. To gather analysis and assess trends and interests. To conduct aggregate or research analysis to enhance, protect, and make informed decisions on the Site. To detect, prevent, and address technical issues. To enforce agreements, terms, conditions, and policies. To help maintain the safety, security, and integrity of the Site and technology assets.
Donor Application Information	Personal background, education, family history, lifestyle information, physical characteristics, and motivations for donation provided during the application process.	To evaluate donor eligibility, create donor profiles for intended parents, and facilitate matching services.
Genetic and Medical History	Family medical history, genetic testing results, personal health information, and screening results collected during the donor evaluation process.	To assess donor suitability, provide information to intended parents for matching decisions, and comply with industry standards for donor screening.
Matching Preferences	Intended parents’ preferences for donor characteristics, requirements, and selection criteria.	To facilitate matching between donors and intended parents and provide personalized matching services.
Compensation Information	Payment details, tax information, and compensation records for egg donors.	To process donor compensation, maintain financial records, and comply with tax reporting requirements.

We also collect anonymized and aggregated information through Google Analytics that may be created or derived from your usage of our Site for purposes that include data analysis and improving our Site. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners. If we wish to process your existing information for a new purpose other than as stated above, we must inform you of that further processing and provide information surrounding your information’s use as necessary to provide the Site to you and to comply with a request to be added to our email list. In addition, if we communicate with you for marketing or other promotional purposes, via email, notifications or other messages, we do so based on your consent.

How we use your information

Our legal basis for using your information as described above is a legitimate basis. In relying on legitimate interests as the reason for processing your information, we carry out a balancing exercise to make sure your rights as an individual are not impacted unnecessarily.

We consider that it is reasonable for us to process your personal information for the purposes of our legitimate interests when, on balance, (a) we process your personal information only so far as is necessary for such purpose, and your rights and freedoms do not outweigh such purposes, and (b) it can be reasonably expected for us to process your personal information in this way. In most cases, the information is being processed for your benefit as well as ours.

We have a legitimate business interest in processing your personal information where:

• We need the information to respond to your inquiries or requests (e.g., to add you to our email list when you have subscribed).
• We would be unable to provide our Site or requested services without processing your information.

Tracking technologies and third-party advertisements

Third parties, including advertisers and analytics companies, may collect information, potentially including personal information, about your activities over time and across different websites when you use our Site. Such third parties may provide NEST with data collection, reporting, ad response measurement, and other analytical information. Such third parties may also assist NEST with digital delivery of relevant marketing messages and advertisements.

Cookies. We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below. The cookies that are categorized as “Necessary” are stored on your browser as they are essential for enabling the basic functionalities of the site. We also use third-party cookies that help us analyze how you use this website, store your preferences, and provide the content and advertisements that are relevant to you. These cookies will only be stored in your browser with your prior consent. You can choose to enable or disable some or all of these cookies but disabling some of them may affect your browsing experience.

Cookie Type	Description
Necessary	These cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
Functional	These cookies enable the website to perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
Analytics	These cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
Performance	These cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Advertisement	Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

You can choose whether to accept certain cookies by changing the settings on your browser or device. Each browser has its own methods for doing this. For detailed instructions on how to disable, block or delete cookies in your browser, consult your browser’s help files or visit How to Manage Cookies. Please bear in mind that if you choose to disable this function, your experience with the Site may be impaired and some features may not work as they were intended. When we use cookies or other similar technologies, we may set the cookies ourselves or ask third parties to do so to help us.

You can opt out of non-essential cookies by adjusting your cookie preferences or by following the instructions in our Cookie Preference Center. Our Sites honors Global Privacy Control signals. Global Privacy Control is a browser tool that you can use to inform websites of your opt-out preferences. To set up Global Privacy Control, you can visit the Global Privacy Control page.

Please note that the Site is not set up to respond to Do Not Track (DNT) signals, but it does respond to browser cookies settings. You may opt out from receiving personalized advertising from some third parties by visiting here. Please note that these choices will not opt you out of receiving advertisements. You will continue to receive generic advertisements.

Pixels, Web Beacons. We or our third-party partners may use invisible pixels or beacons on the Site to count how many users access or use certain pages, features or content. This information is collected and reported in the aggregate. We may use this information to improve our current Site offerings, develop new products or services, and target information to you that may be helpful and useful to you based upon your use of the Site.

Who we may share your information with

In connection with our Site or services, we may share your personal information with the following types of recipients and for the following reasons:

Categories of Recipients	Reasons for sharing
Service providers	We use service providers to operate our software and infrastructure, in particular providers that host, store, manage, and maintain our Site, its content and the data we process. This includes our hosting and information security service providers.
Corporate affiliates	We may share your personal information with corporate affiliates including corporate parents, subsidiaries, other affiliated entities and associated entities, and clients.
Marketing service providers	We use marketing service providers to communicate and interact with you.
Data analytics providers	We will share your personal information to create general data analytics regarding usage of our Site on an aggregate basis and without personal identifiers. As noted above, we use Google Analytics, a service provided by Google, Inc., to gather information about how you and other users engage with our Site. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners.
Chatbot service providers	We use a third-party chatbot platform to power our automated customer service interactions. This includes sharing conversation data, personal identifiers, and technical interaction data with our chatbot service provider to enable real-time responses, maintain conversation history, and improve chatbot functionality. Our chatbot providers are contractually required to protect your information and use it only for providing chatbot services to us.
Law enforcement and government authorities	We will share your personal information with third parties where required by law (including to respond to valid legal process such as a search warrant or a court order), where it is necessary in connection with our Site or where we have another legitimate interest in doing so.
Other legal or regulatory authorities	We will share your personal information for us to comply with our legal obligations, including assessing compliance with our regulatory requirements (e.g., using user purchases in the aggregate, including revenues generated in connection with our regulatory tax requirements).
Buyer or successor of our business	We reserve the right to disclose and transfer all information (including personal information) we collect or maintain, including information related to our Sites, to a subsequent owner, co-owner or operator of one or more of the Sites or in connection with a corporate merger, consolidation, or restructuring, the sale of substantially all of our stock and/or assets, or other corporate change, including, without limitation, during the course of any due diligence process. We will share your personal information with any buyer or successor in the event of a merger, reorganization, dissolution, or other sale or transfer of title.
Other third parties	We may share your personal information with other third parties where you expressly request or authorize us to disclose your personal information.
Medical screening providers and laboratories	We share egg donor information with third-party medical professionals, physicians, and laboratories who conduct required health screenings, genetic testing, infectious disease testing, and psychological evaluations as part of the donor qualification process. This information sharing is necessary to assess donor eligibility and comply with FDA regulations.
Fertility clinics and reproductive endocrinologists	We may share selected donor information (including donor profiles and medical screening results) with fertility clinics and reproductive endocrinologists who are working with intended parents. This sharing is necessary to facilitate the egg donation and retrieval process. We only share information with clinics that have been selected by the intended parents or as necessary to coordinate the donation cycle.
Financial institutions and payment processors	We share necessary financial information with banks, payment processors, and financial service providers to process egg donor compensation payments, reimburse donor expenses, and process payments from intended parents for our services. We may also share tax information with tax authorities as required by law (including IRS Form 1099 reporting for donor compensation).

In addition, we will disclose information about you:

• When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.
• If disclosure is necessary to protect the vital interests of a person or the public.
• To protect our property, services and legal rights.
• To prevent fraud against NEST, our Site, our affiliates, egg donors, intended parents, or business partners.
• To support auditing, compliance, and corporate governance functions.

Most, if not all, of the third parties with whom we may share your personal information are located and store your information in the United States, although some may store your information outside of the United States. These third parties are not authorized by us to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements.

How we safeguard your personal information

We implement reasonable security measures designed to reduce the risks of loss, misuse, unauthorized access, disclosure or alteration of your personal information. While we are committed to protecting your personal information, please note that information stored or communicated over the Internet is never 100% secure. Any transmission of personal information is at your own risk. As a result, we cannot guarantee or warrant the security of any information you disclose or transmit to us or that are otherwise provided to us and we cannot be responsible for the theft, destruction, or inadvertent disclosure of information. By using our Site, you acknowledge and accept all security risks and risks of loss.

How long we store your personal information

We may store your personal information as long as you use our Site or services and for legitimate business purposes. We may store your personal information following completion of transactions with you to the extent required or useful to comply with our legal, accounting, or reporting requirements (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, enforce our legal agreements and policies and for internal operational and planning purposes. Additionally, we may continue to store your personal information contained in our standard back-ups. Following termination or deactivation of any account you may create, we may retain your personal information for a reasonable amount of time for archival purposes. Furthermore, we may retain and continue to indefinitely use your personal information contained in your communications to other users.

We also will retain Usage Information (as described above) for internal analysis purposes. Usage Information is generally retained for a shorter period of time, except when Usage Information is used to strengthen the security or to improve the functionality of our Site, or we are legally obligated to retain Usage Information for longer periods.

Upon your request, we will delete or de-identify your personal information unless we are legally required or allowed to maintain such personal information.

Data Retention for Egg Donation Records

• Regulatory Requirements: Due to FDA regulations governing tissue banks and egg donation (21 CFR Part 1271), we are required to maintain certain donor screening and testing records for extended periods. These records must be maintained for at least 10 years after the date of donor screening or for at least 10 years after the donation, whichever is later.
• Donor Profile Information: Egg donor profiles, including application information, photos, and personal statements, are maintained for as long as a donor remains in our active donor pool. Once a donor completes their final donation cycle or withdraws from the program, we may retain profile information for historical matching purposes and to facilitate any future contact arrangements agreed upon by the parties.
• Medical and Genetic Records: Medical screening results, genetic testing results, and health information are maintained in accordance with FDA requirements and may be retained indefinitely to facilitate future medical information needs of intended parents, resulting offspring, or donors themselves.
• Financial Records: Compensation and payment records are maintained in accordance with applicable tax laws and accounting standards, typically for at least seven years after the transaction.
• Contact Information for Future Matching: If agreed upon by all parties, we may maintain contact information for egg donors and intended parents indefinitely to facilitate potential future contact arrangements, particularly if offspring wish to contact biological donors after reaching the age of majority.

Donors and intended parents may request deletion of certain information as described in the Additional Notices and Rights section below, but we may be required to retain some information to comply with legal and regulatory obligations.

Links to other sites and services

Our Site may provide links to third-party websites. We do not control such websites, and our connection to them may only consist of a hyperlink (“Linked Sites”). We cannot be held responsible for third parties’ privacy practices or content provided on these websites. If you click on one of these links, please understand that you are leaving our Site and any information you provide will not be covered by this Privacy Policy. All links to Linked Sites are provided only because they may be of interest to users of the Site or offer a service for your convenience. The fact that we offer such links should not be construed in any way as an endorsement, authorization, or sponsorship of that Linked Site or its content, products, or services. Please read that website’s privacy policy before providing any information.

You acknowledge and agree that NEST has no responsibility for the accuracy or reliability of information provided by or through Linked Sites. NEST does not author, edit, or have any responsibility to monitor these Linked Sites. You should refer to the separate terms of use, privacy policies, and other rules posted on a Linked Site before you use them. You acknowledge that we shall not be responsible or liable for any damage or loss caused or alleged to be caused by, or in connection with, your reliance on any information, any good, any service, or any other material provided through a Linked Site. You bear all risk associated with the use of the Linked Sites, third party services, and your correspondence or business dealings with third parties (including any advertisers) found on or through the Site. We reserve the right to terminate such links at any time.

Children

Our Site is not directed to anyone under the age of eighteen (18) years (“Children” or “Child”). By using our Site, you represent that you are at least eighteen (18) years old. If you do not meet this age requirement, then you must not access or use our Site.

We do not knowingly collect information from anyone under the age of eighteen (18), and we do not target the Site or our services to Children. If you are under the age of eighteen (18) years old, please do not use our Site and do not provide any information to us. For more information about the Children’s Online Privacy Protection Act (“COPPA”), which applies to websites that direct their services to children under the age of thirteen (13), please visit the Federal Trade Commission’s website https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions.

If you think we have collected information from a Child through our Site, please contact us through one of the methods listed under “How to contact us” above. If we learn that we have collected personal information of a Child, we will take reasonable steps to remove that information from our servers.

Acknowledgement

To the extent that you provide or transmit any information, including, but not limited to, any personal information and any information that identifies any other individual (including without limitation name, email address and/or telephone number), to NEST or our third-party service or data providers, licensors, or distributors (“Representatives”) through the Site, you warrant that: (a) you are providing or obtaining only your own information or the information of others which you are authorized to provide to third parties and/or obtain from third parties on their behalf; and (b) the use of such information by NEST and its Representatives will not infringe upon or misappropriate the intellectual property rights or otherwise violate the rights of any third parties.

REGULATORY COMPLIANCE AND INDUSTRY STANDARDS

Nest operates in compliance with applicable federal and state regulations governing tissue banks and egg donation services, including:

Federal Regulations:

• FDA Regulations: We comply with FDA regulations regarding human cells, tissues, and cellular and tissue-based products (HCT/Ps) under 21 CFR Part 1271, including requirements for donor eligibility determination, donor screening, and donor testing.
• GINA Compliance: We comply with the Genetic Information Nondiscrimination Act (GINA) and maintain strict protections for genetic information, including limitations on use and disclosure of genetic test results and family medical history.

State Law Requirements:

• Donor-Conceived Person Rights: Colorado law (C.R.S. § 19-4.5-101 et seq.) and Oregon law (ORS 109.239 et seq.) require that donor-conceived persons be able to access identifying information about their donor once they reach 18 years of age.  All egg donors must acknowledge that their identity may be disclosed pursuant to these state laws, regardless of whether the donation was initially designated as anonymous.
• State Tissue Banking Regulations: We comply with applicable state laws and regulations governing tissue banking and egg donation in all states where we operate.

Industry Standards:

• ASRM/SART Guidelines: We follow guidelines established by the American Society for Reproductive Medicine (ASRM) and the Society for Assisted Reproductive Technology (SART) regarding ethical egg donation practices, donor screening standards, and compensation practices.

Governing law and jurisdiction

This Privacy Policy shall be construed and governed under the laws of the United States and State of Delaware (without regard to rules governing conflicts of laws provisions). Subject to the mandatory arbitration provision as captured in our Terms of Use, you agree that venue for all actions, arising out of or relating in any way to your use of our Site, shall be in federal or state court of competent jurisdiction located in San Francisco County, California, within one (1) year after the claim arises. Each party waives any objections based on forum non conveniens and waives any objection to venue of any action instituted hereunder to the extent that an action is brought in the courts identified above.

Special notice to non-U.S. users regarding data transfers

If you are located outside of the U.S., please note that we store your personal information in the United States or other locations that may be outside your home country. The privacy protections and the rights of authorities to access your information in these countries may not be the same as in your home country. If you are visiting our Site or using our services from outside of the U.S., please note that you are transferring information about you, including personal information, to a country and jurisdiction that may not have the same data protection laws as your country of residence. Because of the nature of our services, you may not have the same rights regarding your personal information that you would have interacting with a company in your jurisdiction.

If you are located in a country outside the U.S. and submit personal information to us, you consent to the general use and disclosure of such information as provided in this Privacy Policy and to the transfer and/or storage of that information to the U.S. and other countries outside your home country.

Donor Anonymity and Information Sharing

Information Shared with Intended Parents

During the Donation Process:

• Anonymous Donations: Nest offers both anonymous and known egg donation arrangements. For anonymous donations, we maintain donor anonymity by not disclosing identifying information (such as full name, contact information, or precise location) to intended parents during the donation process. Intended parents receive comprehensive profile information, including physical characteristics, medical and genetic history, educational background, and personal statements, but not information that would directly identify the donor at the time of donations.
• Known Donations: In some cases, egg donors and intended parents may mutually agree to a known donation arrangement where identifying information is shared from the outset. Such arrangements are clearly disclosed and agreed upon by all parties before any information sharing occurs.

State Law Requirements for Donor-Conceived Persons:

• Notwithstanding any anonymous donation arrangement, Colorado law (C.R.S. § 19-4.5-101 et seq.) and Oregon law (ORS 109.239 et seq.) require that donor-conceived persons be able to access identifying information about their donor once they reach 18 years of age. This means that even in anonymous donation arrangements, donor identifying information will be disclosed to any resulting donor-conceived person who requests it after turning 18. Donors are informed of this legal requirement before donation, and all donors must acknowledge that their identity may be disclosed pursuant to these state laws.

After Donation – Legal Requirements:

• Profile Information: Donor profiles made available to intended parents include photographs, physical descriptions, educational and employment information, family medical history, genetic testing results, and personal essays. While comprehensive, these profiles are designed to protect donor identity from intended parents in anonymous arrangements during the donation process.

Post-Donation Contact:

• Our policies regarding post-donation contact and future information sharing are disclosed in separate agreements between Nest, egg donors, and intended parents. This Privacy Policy governs how we collect, use, and protect information but does not address voluntary post-donation contact arrangements, which are contractual matters.
• Future Contact by Offspring: As egg donation may result in the birth of children, we maintain records to comply with Colorado and Oregon laws requiring disclosure of donor identity to donor-conceived persons at age 18. Additionally, if all relevant parties (donor, intended parents, and any resulting offspring when they reach the age of majority) voluntarily agree to contact beyond what is legally required, we may facilitate such contact. However, disclosure to donor-conceived persons at age 18 pursuant to Colorado and Oregon law does not require consent from donors or intended parents—it is a legal right of the donor-conceived person.

Additional notices and rights

You have choices about how we use your personal information to communicate with you. You can opt-out from receiving future marketing communications from us at any time by:

• Using unsubscribe functions in email, text messages, or phone calls you receive from us.
• Contacting us as set forth under “How to contact us” above.

Depending on where you live, you may have certain rights with respect to your data under certain circumstances, which may include the following:

• The right to request access to your personal information and the following information regarding our use of your personal information:
  • The purpose of such use
  • The categories of your personal information that we have used
  • To whom we have disclosed your personal information.
• The right to request that we erase your personal information when we no longer need such data in connection with our Site or our services.
• The right to request that we correct any inaccurate personal information concerning you. You may also update or change your information under your account settings.
• The right to withdraw consent to our use of personal information, if we are relying on consent to use your personal information.
• The right to request that we restrict our use of your personal information (e.g., suspend our use of your personal information).
• The right to object to our use of your personal information where we are not using it to perform services you have requested from us.
• The right to receive a copy of your personal information.
• The right to lodge a complaint with the relevant regulator or supervising authority of your state or country.

If you want to exercise any of the rights listed above and you are a resident of a jurisdiction providing you such rights, please contact us through one of the methods listed in under “How to contact us” above.

Please note that in order for us to verify certain requests (including verification of your identity, residency, and (for requests made on behalf of someone else) your relationship with the individual on whose behalf the request is being made), you may be required to confirm information that we have on file for you including email address, phone number, full name, address and other personal information. We reserve the right to deny a request if the identity or authority of the requesting party cannot be confirmed.

We will confirm receipt of your request within ten (10) business days and may request additional information necessary to verify that you are permitted to make the request. We will respond to any verifiable request within thirty (30) calendar days of receiving it, subject to delays and exclusions permitted by law. If we require more time to respond, we will let you know the reason why and the extension period in writing. If you have a password-protected online account with us, we may respond via that account. If you do not have an online account, we will use the email address or postal address you provided to us when making the request.

In certain cases, a request may be denied. For example, businesses are not required to delete personal information if it is necessary to complete a transaction, is reasonably used for an ongoing business relationship, or is used internally in a lawful manner that is compatible with the context in which the individual provided the information. If we deny your deletion request in whole or in part, we will explain why we denied it but will delete your information in a manner consistent with this Privacy Policy and applicable law. If we deny a request for information, we will still try to provide you as much of the information as we can, but we will withhold the information subject to denial.

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We will not discriminate against you for exercising any of your privacy rights, including, but not limited to, by:

• Denying goods or services.
• Charging different prices or rates for goods and services, including through the use of discounts or other benefits or imposing penalties.
• Providing a different level or quality of goods or services.
• Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services. We may, however, charge a different price or rate, or provide a different level or quality of goods or services, if that difference is related to the value provided by your information.

If the jurisdiction in which you reside gives you the right to appeal, you can appeal our denial of any requests to exercise any of the rights described below through one of the methods in the “How to contact us” section.

We do not sell personal information for valuable consideration. We use cookies and tracking technologies as described above in the “Tracking technologies and third-party advertisements” section of this Privacy Policy and in our Preference Center. We also may disclose information about you to advertising providers in order to deliver you targeted advertisements across the internet as described in this Privacy Policy,

Certain of our disclosures may be considered a “sale” or “sharing” of personal information under state privacy laws, including California Consumer Privacy Laws (defined further below). Under those more expansive definitions, we have “sold” or “shared” the following categories of personal information in the past twelve (12) months:

Categories of Personal Information Sold/Shared in the Past 12 Months	Categories of Recipients
Identifiers	Marketing service providers; advertising networks; data analytics providers
Interactions	Marketing service providers; advertising networks; data analytics providers
Internet / electronic network activity	Marketing service providers; advertising networks; data analytics providers
Geolocation data	Marketing service providers; advertising networks; data analytics providers
Demographic data	Marketing service providers; advertising networks; data analytics providers
Chatbot Conversation data	Chatbot service provider
Donor profile information	Fertility clinics; reproductive endocrinologists; intended parents (through secure portal access)
Genetic and Medical history data	Medical screening providers; fertility clinics; intended parents (for matched donors only)

California personal information

If you are a resident of California, the laws of California provide you certain rights regarding your personal information. This includes rights afforded to you pursuant to the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, “California Consumer Privacy Laws”).

Shine the Light. You have the right to ask us one time each year if we have shared personal information with third parties for their direct marketing purposes. To make a request, please send us an email at the address provided in the “How to contact us” section. Indicate in your letter that you are a California resident making a “Shine the Light” inquiry.

CA Personal Information. The California Consumer Privacy Laws define personal information as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“CA Personal Information”). CA Personal Information does not include: (1) De-identified or aggregated information; (2) information that is lawfully made available from federal, state, or local government records, or information that NEST has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media; or information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience; and (3) information excluded from the California Consumer Privacy Laws, such as financial information covered under the Fair Credit Reporting Act (FCRA), HIPAA, or Gramm-Leach-Bliley Act (GLBA).

Categories of Information We Collect and Disclose. The following chart provides information about the types of CA Personal Information we collect, the sources of the information, the purposes for which we use the information, whether the information has been disclosed for a business purpose, and the categories of third parties with whom we have shared this information in the last twelve (12) months.

Type of CA Personal Information	Categories of Sources	Business or Commercial Purposes for Collection	Disclosed for a Business Purpose?	Third Parties to whom Disclosed for Business Purpose
Identifiers This may include but is not limited to: Contact information, real name, postal address, email address, telephone number, social media usernames, or other similar identifiers.	Directly from you; From our Sites as defined in our Terms of Use; Vendors; Data brokers; Social media platforms and networks; and government agencies.	To provide you with services and for internal purposes.	Yes	Internet service providers; analytics providers; advertising networks; professional services providers; government agencies; and affiliates
Internet and Electronic Network Activity Information This may include but is not limited to: browsing history, search history, and information regarding your interaction with our website or advertisements.	From our Sites as defined in our Terms of Use; vendors; and social media platforms and networks.	To provide you with services and for internal marketing analytics.	Yes	Internet service providers; analytics providers; advertising networks; professional services providers; government agencies; and affiliates
Location Data This may include but is not limited to: device location.	From our Sites as defined in our Terms of Use.	To provide you with services and for internal purposes.	Yes	Internet service providers; analytics providers; and advertising networks;
Commercial Information This may include but is not limited to: transaction information, records of service history, and service tendencies.	Directly from you; website cookies; vendors; data brokers; social media platforms and networks; and government agencies.	To provide you with services and for internal purposes such as analytics.	Yes	Internet service providers; analytics providers; advertising networks; professional services providers; government agencies; and affiliates
Audio, Electronic, or Visual Information This may include but is not limited to: audio and video recordings, and other electronic communications.  Video surveillance may be conducted in public areas of our facilities, including lobbies, waiting areas, and common spaces for security and safety purposes.  Audio is not recorded as part of video surveillance systems.  Private consultation rooms and screening areas are not subject to general surveillance to protect privacy and confidentiality.	Directly from you; vendors; social media platforms and networks; and government agencies.	To provide you with services, complete transactions, for internal marketing analytics, and to defend and/or pursue legal rights of NEST or others as may be applicable.	Yes	Professional services providers; government agencies; and affiliates
Inferences from CA Personal Information Collected This may include but is not limited to: creating consumer profiles reflecting preferences and predispositions.	The original sources are the above enumerated sources of the underlying data that is compiled.	To provide you with services, for advertising and for internal reporting and analytics purposes.	Yes	Analytics providers; advertising networks; and affiliates
Donor Application and Profile Information	This may include but is not limited to: educational history, employment information, family composition, physical characteristics, photos, personal essays, and background information provided by egg donor applicants.	Directly from egg donor applicants; verification services; educational institutions; background check providers. To evaluate donor eligibility. To create donor profiles for intended parent review. To facilitate matching services. To verify information provided by donors.	Yes	Medical screening providers; fertility clinics; reproductive endocrinologists; intended parents (through secure access to profiles); verification service providers; professional services providers.
Genetic and Medical Information	This may include but is not limited to: genetic testing results, family medical history, personal health history, psychological evaluation results, drug screening results, infectious disease testing results.	Directly from egg donors; medical screening providers and laboratories; genetic testing companies; psychological evaluators; healthcare providers. To assess donor medical eligibility. To comply with FDA regulations for donor screening. To provide health information to intended parents. To maintain required records.	Yes	Medical screening providers and laboratories; fertility clinics; reproductive endocrinologists; intended parents (for matched donors); regulatory authorities; professional services providers.
Financial and Tax Information	This may include but is not limited to: bank account information, tax identification numbers, compensation records, payment history, expense reimbursements.	Directly from egg donors and intended parents; financial institutions; payment processors.To process donor compensation. To reimburse donor expenses. To process intended parent payments. To comply with tax reporting obligations.	Yes	Financial institutions and payment processors; tax authorities; professional services providers (accountants, auditors).

Your California Consumer Privacy Law Rights

You may have certain rights with respect to CA Personal Information that we have collected and used under certain circumstances, including the below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Information. You can request that we provide you the following information regarding our use of your CA Personal Information:

• The categories of your CA Personal Information that we have collected
• The purposes for which we have collected or used such CA Personal Information
• The categories of sources for the CA Personal Information we have collected about you
• The categories of third parties with whom we have disclosed your CA Personal Information
• If we have disclosed your CA Personal Information for a business purpose, a list identifying the CA Personal Information categories that each category of recipient obtained
• If we have sold your CA Personal Information, a list identifying the CA Personal Information categories that each category of recipient purchased

Access. You can request that we provide you a copy of your CA Personal Information that we have collected in the past twelve (12) months.

Correction. You can request that we correct any inaccuracies in your CA Personal Information. NEST will use commercially reasonable efforts to correct the identified inaccurate information upon receiving a verifiable request.

Deletion. You can request that we delete your CA Personal Information collected in the past twelve (12) months when we no longer need such data in connection with our business (subject to certain exceptions that may apply under applicable law).

Opt-Out of Sale or Sharing. Under California Consumer Privacy Law, you have the right to opt out of the sale or the disclosing of your CA Personal Information for purposes of cross-context behavioral advertising (“sharing”).

Limit Use of Sensitive Personal Information. You have the right to limit the use and disclosure of your “sensitive personal information” obtained by NEST.

Right to Non-Discrimination. If you choose to exercise your privacy rights under the California Consumer Privacy Laws we will not charge you different prices or provide different quality of services unless those differences are related to your CA Personal Information or otherwise permitted by law.

If you are a California resident where one or more of these rights are granted to you under applicable law, and you wish to exercise any such rights listed above, you may exercise your privacy rights by visiting Insert link to webform, by emailing privacy@nestdonorbank.com or calling our toll free phone number at (800) 764-8960.

Only you, or an agent legally authorized to act on your behalf, may make a verifiable consumer request related to your CA Personal Information (“California Consumer Request”). Please understand that we are required to verify your California Consumer Request and may require you to provide some information to enable us to carry out such verification. We will deny requests from agents that do not submit proof of legal authorization to act on your behalf. To verify that an agent has legal authority to act for you, we may require a copy of a power of attorney or require that you provide the agent with written permission and verify your own identity with us. We cannot respond to your California Consumer Request or provide you with CA Personal Information if we cannot verify your identity or authority to make the California Consumer Request and confirm the CA Personal Information relates to you.

When you, or someone legally authorized to act on your behalf, make a California Consumer Request, you can expect the following:

• We will verify your identity. You will need to provide us with certain information so that we can verify that you are who you say you are. Which information is required may depend on the type and sensitivity of information subject to the California Consumer Request.
• We will respond to your California Consumer Request within the legally required amount of time. If necessary, we may need additional time to respond where allowed by law, but we will reply either way within the legally required period and, if we need an extension, we will explain why.
• In certain cases, a California Consumer Request may be denied. For example, if we cannot verify your identity or if providing you information could create an unreasonable risk to someone’s security (for example, we do not want very sensitive information disclosed inappropriately). If we deny your California Consumer Request, we will explain why we denied it.

Making a California Consumer Request does not require you to create an account with us. We will only use CA Personal Information provided in a California Consumer Request to verify the requestor’s identity or authority to make the California Consumer Request.

Only California residents can make a California Consumer Request. A California resident is a person who currently lives in California or is domiciled in California but is outside of the state for a temporary or transitory purpose.